🟢 Low ⏱ 5–15 min Last verified: 8 July 2016 Affected versions: Ubuntu 16.04 (xenial) 📖 ~4 min read • Source: Ubuntu Security Notice USN-4506-1 Related CVEs: CVE-2016-9928 Upstream summary: It was discovered that MCabber does not properly manage roster pushes. An attacker could possibly use this issue to remotely perform machine-in-the-middle attacks. (CVE-2016-9928). […]
🟡 Medium ⏱ 10–30 min Last verified: 8 July 2016 Affected versions: Ubuntu 14.04 (trusty) 📖 ~4 min read • Source: Ubuntu Security Notice USN-2729-1 Related CVEs: CVE-2015-5198 CVE-2015-5199 CVE-2015-5200 Upstream summary: Florian Weimer discovered that libvdpau incorrectly handled certain environment variables. A local attacker could possibly use this issue to gain privileges. Table […]
🟡 Medium ⏱ 15–45 min Last verified: 7 July 2016 Affected versions: IBM AIX 7.2 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2011-1375, IBM Support Bulletin CVE: CVE-2011-1375 NVD summary: IBM AIX 6.1 and 7.1 does not restrict the wpar_limits_config and wpar_limits_modify system calls, which allows local users to cause a denial […]
🟠 High ⏱ 30–90 min Last verified: 7 July 2016 Affected versions: IBM AIX 7.2 Affected: 7.1 📖 ~4 min read • Source: NVD CVE-2013-4011, IBM Support Bulletin CVE: CVE-2013-4011 NVD summary: Multiple unspecified vulnerabilities in the InfiniBand subsystem in IBM AIX 6.1 and 7.1, and VIOS 2.2.2.2-FP-26 SP-02, allow local users to gain […]
🟠 High ⏱ 30–90 min Last verified: 3 July 2016 Affected versions: IBM AIX 7.1 Affected: 7.1, 7.2 📖 ~4 min read • Source: NVD CVE-2016-6079, IBM Support Bulletin CVE: CVE-2016-6079 NVD summary: IBM AIX 5.3, 6.1, 7.1, and 7.2 contains an unspecified vulnerability that would allow a locally authenticated user to obtain root […]
🟢 Low ⏱ 10–30 min Last verified: 2 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-1999-0078, IBM PSIRT advisory page CVE: CVE-1999-0078 NVD summary: pcnfsd (aka rpc.pcnfsd) allows local users to change file permissions, or execute arbitrary commands through arguments in the RPC call. References: exchange.xforce.ibmcloud.com/vulnerabilities/CVE […]
🟠 High ⏱ 30–90 min Last verified: 2 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2004-0545, IBM Support Bulletin CVE: CVE-2004-0545 NVD summary: LVM for AIX 5.1 and 5.2 allows local users to overwrite arbitrary files via a symlink attack. References: www-1.ibm.com/services/continuity/recover1.nsf/m www.ciac.org/ciac/bulletins/o-131.shtml www.securityfocus.com/bid/10230 Table […]
🟠 High ⏱ 30–90 min Last verified: 2 July 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2010-4773, IBM PSIRT advisory page CVE: CVE-2010-4773 NVD summary: Unspecified vulnerability in Hitachi EUR Form Client before 05-10 -/D 2010.11.15 and 05-10-CA (* 2) 2010.11.15; Hitachi EUR Form Service before 05-10 -/D […]
🟡 Medium ⏱ 15–45 min Last verified: 30 June 2016 Affected versions: IBM AIX 7.1 📖 ~4 min read • Source: NVD CVE-2015-9281, IBM PSIRT advisory page CVE: CVE-2015-9281 NVD summary: Logon Manager in SAS Web Infrastructure Platform before 9.4M3 allows reflected XSS on the Timeout page. References: support.sas.com/kb/55/537.html support.sas.com/kb/55/537.html Table of contents […]
🟠 High ⏱ 30–90 min Last verified: 30 June 2016 Affected versions: IBM AIX 7.2 📖 ~4 min read • Source: NVD CVE-2001-1080, IBM Support Bulletin CVE: CVE-2001-1080 NVD summary: diagrpt in AIX 4.3.x and 5.1 uses the DIAGDATADIR environment variable to find and execute certain programs, which allows local users to gain privileges […]
